Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa
File:                     3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa (raw, json)
Hash identifier:          Tnk8SjcYJph5PzkEydkVO1zNeCTigxZ2UF9kyGJmOBQ=
Subject key identifier:   5F:43:B0:38:FD:7E:4E:51:C4:27:8A:8D:4D:2C:6E:9D:CE:77:25:F5
Certificate issuer:       /CN=41692467D51C0CDCAE5CFACADB17B6B148A848D7
Certificate serial:       1DEC605B2EAC4CC54D22444CCF141CAA56F11C3C
Authority key identifier: 41:69:24:67:D5:1C:0C:DC:AE:5C:FA:CA:DB:17:B6:B1:48:A8:48:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41692467D51C0CDCAE5CFACADB17B6B148A848D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa
Signing time:             Tue 16 Apr 2024 12:54:28 +0000
ROA not before:           Tue 16 Apr 2024 12:49:28 +0000
ROA not after:            Tue 15 Apr 2025 12:54:28 +0000
asID:                     272717
IP address blocks:        167.250.125.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ec:60:5b:2e:ac:4c:c5:4d:22:44:4c:cf:14:1c:aa:56:f1:1c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41692467D51C0CDCAE5CFACADB17B6B148A848D7
        Validity
            Not Before: Apr 16 12:49:28 2024 GMT
            Not After : Apr 15 12:54:28 2025 GMT
        Subject: CN=5F43B038FD7E4E51C4278A8D4D2C6E9DCE7725F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:8d:f1:8f:92:fd:05:71:d5:79:1c:81:80:
                    d2:72:77:39:12:48:7f:12:b7:7c:45:66:7e:a4:2f:
                    32:ce:38:bf:56:f9:4d:a3:c2:60:13:62:c4:9e:79:
                    a8:11:8e:1b:5b:e1:b9:ca:17:50:d1:b7:9b:ab:61:
                    a8:be:99:c6:81:8b:61:93:7c:57:1b:71:64:d1:e1:
                    9d:aa:68:4f:70:e6:03:24:c2:01:9e:d7:e7:b9:13:
                    de:02:9e:12:64:fe:dc:46:d8:c1:1b:3f:bb:68:12:
                    ce:d4:aa:a8:15:de:53:af:80:d9:4a:b8:2c:95:f9:
                    f3:d0:d9:56:24:b1:9c:bc:74:36:e0:5b:74:4c:64:
                    d1:bf:83:f3:b8:f1:65:43:55:50:6b:c5:06:f4:e9:
                    83:da:b1:80:4b:7a:ed:43:91:2b:f1:24:2b:bb:a4:
                    e0:cb:a2:b6:5d:ea:f7:df:33:cd:25:fb:d9:50:dc:
                    10:d9:e2:93:dc:96:59:03:7b:ea:c3:71:65:6c:15:
                    cc:cc:ee:c8:d6:8e:c9:fd:b7:21:c0:f2:52:73:61:
                    3d:ed:9b:8d:b9:bf:0c:d0:0c:d0:3f:61:7b:bd:51:
                    04:ef:64:da:6b:6d:9f:a9:13:8b:ac:33:2c:ba:54:
                    4d:8e:bd:3e:a0:83:d2:15:3c:b5:a1:02:6f:5a:ab:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:43:B0:38:FD:7E:4E:51:C4:27:8A:8D:4D:2C:6E:9D:CE:77:25:F5
            X509v3 Authority Key Identifier:
                keyid:41:69:24:67:D5:1C:0C:DC:AE:5C:FA:CA:DB:17:B6:B1:48:A8:48:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/41692467D51C0CDCAE5CFACADB17B6B148A848D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41692467D51C0CDCAE5CFACADB17B6B148A848D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e1:2d:a9:fb:4d:1d:6f:67:63:52:4d:bb:6f:17:07:c2:ab:
         b3:a1:50:65:25:08:c9:b7:9c:7b:f1:29:a7:e3:63:20:9c:72:
         9e:34:1b:a9:41:fa:42:df:eb:cf:01:58:e0:68:8f:19:2e:98:
         dc:4d:a1:7f:c9:6c:75:fb:33:5d:16:6a:47:31:b2:59:af:67:
         0d:e8:ea:b3:df:ea:e5:4b:f6:0b:20:f8:ad:0f:a1:1c:64:4a:
         9b:1b:26:aa:22:ac:a4:1a:1c:5f:0a:6f:d0:1a:85:ad:73:8c:
         be:aa:ed:f8:bf:a6:7d:1f:63:90:a5:36:79:e4:1e:45:f0:f1:
         3c:3e:4e:19:0d:a7:07:de:70:c6:ae:18:12:85:58:08:96:0f:
         29:02:68:4d:21:55:ba:24:ea:f6:8e:d3:d4:b8:28:d7:7d:25:
         30:b1:51:32:42:d6:dd:42:03:8e:c0:74:77:7e:fe:e7:06:35:
         17:03:ab:b5:7b:3b:7d:48:44:12:45:fb:d0:73:03:2a:77:6a:
         cb:62:b0:b4:63:db:5b:9c:ee:3f:5c:59:af:1e:e7:fe:c3:04:
         5e:7d:c5:ba:f2:dc:54:10:41:2f:84:1a:af:72:df:d6:c8:86:
         67:2c:c5:6c:b1:33:cf:73:a4:03:92:b0:03:f7:35:d8:bc:fc:
         49:5b:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:49 2025 by rpki-client